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section, we conclude that integral Cayley numbers of unit norm are generated 
multiplicatively by three elements. 
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The first class of nonassociative simple Moufang loops was discovered by 
L. Paige in 1956 [9], who investigated Zorn's and Albert's construction of 
simple alternative rings. M. Liebeck proved in 1987 [7] that there are no 
other finite nonassociative simple Moufang loops. We can briefly describe 
the class as follows: 

For every finite field F, there is exactly one simple Moufang loop. Recall 
Zorn's multiplication 

( a a \ f c j\ ( ac + a ■ 5 (17 + ad — (3 x S \ 
\/3 b J \S d J ~ \ /3c + b8 + ax~f (3-j + bd J ' 

where a, b, c, d G F, a, (3, 7, 6 6 F 3 , and where a ■ (3 (resp. a x (3) 
denotes the dot product (resp. vector product) of a and (3. Probably the 
easiest way to think of this multiplication is to consider the usual matrix 
multiplication with the added antidiagonal matrix 
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Wc define the determinant of 



M = 



a a 



13 b 



by det M = ab - a ■ (3. Then C = {M; det M =/= 0} turns out to be a 
nonassociative Moufang loop, and so does A4 = {M; detM = 1}. One can 
show that Z{C), the center of C, consists of all elements 



for ^ a E F. Thus Z{M) is at most a two-element subloop of M. 
More precisely, Z(A4) is trivial if and only if charF, the characteristic of 
F, equals 2 (cf. Lemma 3.2 [9]). Finally, M/Z(M) was found to be simple 
(and nonassociative) in [9]. 

Obviously, a finite simple Moufang loop is either associative (whence a 
finite simple group) , or nonassociative — an element of the class introduced 
above. Each finite simple group is known to be generated by just two 
elements. (See [11] for more details.) The proof of this fact depends heavily 
on the classification of finite simple groups. As we have seen, nonassociative 
simple Moufang loops admit a much simpler classification. They cannot be 
generated by two elements only, since every Moufang loop is diassociative 



In this paper, we show that M/Z{M) is generated by three elements 
when F is a (finite) prime field. The approach taken here is elementary 
Possible generalizations of this result would probably require more de- 
tailed methods than those used here, or a completely different approach 
(cf. L. E. Dickson's proof that SL 2 (q) is two-generated for odd q ^ 9 [4], 



It is inconvenient to work with the quotient M/Z(M). We shall readily 
identify the elements M and — M in all of our computations, and multiply 
by —1 freely. For M G M, a matrix, let M' denote the transpose of M . 

In order to linearize our notation, we introduce two mappings u, I : 
F 3 — > M defined by 




(cf. [8], [2], or [10]). 



or [5]). 
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Next consider t : F 3 \ {0} — > F 3 given by 

( (-ar 1 , 0, 0) if ai ^ 0, 
t(ai, a 2 , a 3 ) = < (0, —a^ 1 , 0) if a x = 0, a 2 ^ 0, 
[ (0, 0, — a^ 1 ) otherwise. 

Note that a ■ t(a) = —1. Finally, let s(a) stand for the matrix 

a 
t(a) 

Recall that, for matrices in M, 



a <\ \ lb — (\ 



(3 b J \-P a 

and also the two special cases of (4.1), (4.2) [9]: 

1(a) = s(a)'u(t(a))(-s(ay), (1) 
u(a) = s(a)l(t(a))(-s(a)). (2) 

Observe that = l(—a), and u(a)~ 1 = u(—a). 

We start our search for generators with the following result due to Paige: 

Proposition 2.1. Every simple Moufang loop M/Z(M) is generated 

by 

{u{a), 1(a): O^aE F 3 }. 



Proof. Combine Lemmas 4.2 and 4.3 [9]. | 

Let us identify all nonzero elements of PF 3 = F 3 /F with those vectors 
from F 3 whose first nonzero coordinate equals 1. Also, let e\ = (1, 0, 0), 
e 2 = (0, 1, 0), and e 3 = (0, 0, 1), as usual. 

Proposition 2.2. Assume that ¥ is a prime field. Then M/Z(M) is 
generated by 

{u(a), 1(a); a £ PF 3 }. 



Proof. First check that u(aa)u(ba) = u((a + b)a), and l(aa)l(ba) = 
l((a + b)a) for all a e F 3 , a, b G F. Given ^ [3 e F 3 , there is a e F and 
a G PF 3 such that (3 — aa. Since F is prime, we can use a as an exponent, 
and write u(/3) — u(a) a , l([3) = l(a) a . We are finished, by Proposition 
2.1. | 
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Proposition 2.3. Assume thatF is prime. Then M / Z (M) is generated 

by 

S = {u(ei), u(e 2 ), u(e 3 )} U {«(a), s(a)'; a e PF 3 }. 

Proof. Observe that, for a G PF 3 , we have t(a) G {— ei, — e2, —63}. 
Given 1(a) with a G PF 3 , (1) yields 1(a) = s(a)'u(— ej)(— s(a)') for some 
e^, 1 < i < 3. In particular, the elements l(ei), 1 < i < 3, are generated by 
S. 

Symmetrically, given u(a) with a G PF 3 , equation (2) yields u(a) = 
s(a)l(—ei)(— s(aj) for some a, 1 < i < 3; and we are done by Proposition 

2.2. I 

Lemma 2.1. Assume a, f3 G F 3 \ {0} are smc/i ffcaf t(a) = £(/?). 27ien 
s(/3) = s(a)Z(— a x (3), and s(f3)' = s(a)'u(a x j3). 

Proof. By definition, we have 

v y v ; \ a x /3 t(a) • /3 / \ a x /3 -1 / 

Thus s((3) = —s(a)~ 1 l(—a x /3) = s(a)l(—a x /?). As for the remaining 
equation, start with s(a)'s((3)' = — u(a x (3). | 

Proposition 2.4. Assume F is prime. Then M/Z(M) is generated by 
{u(ei), s(e,); 1 < i < 3}. 



Proof. Thanks to Proposition 2.3, we only need to generate elements 
s(a) and s(a)' , for a G PF 3 . First of all, note that s(ej)' = — s(e,), and, by 
(1), 1(a) = s(e i ) l u(e i )- 1 s(e i ), for 1 < i < 3. Also, s(0, 1, a) = s(e 2 )l(ei)- a 
and s(0, 1, a)' = s(e 2 )'u(ei) a for all a G F. Similarly, s(l, a, 0) = 
s(ei)/(e 3 )" a and s(l, a, 0)' = s(ei)'u(e 3 ) a for all a G F. Next, by (1) 
and (2), 

Z(l,a,0) = s(l,a,0)'u(-ei)(-s(l,a,0)'), 
u(l,a,0) = s(l,a,0)/(-ei)(-s(l,a,0)). 

For 7^ a G F, we have /(a' 1 , 1, 0) = Z(l, a, 0) a ~\ ii(a _1 , 1, 0) = 
u(l, a, 0) a . Hence we obtained l(— a, 1, 0) and u(— a, 1, 0) for all a G F. 
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Finally, Lemma 2.1 yields 

s(l,a,b) = s(l,a,0)l(b(-a,l,0)) = s(l,a,0)l(-a,l,0)\ 
s(l,a,b)' = s(l,a,0)'u(b(a, -1,0)) = s(l,a,0)'u(-a, 1,0) -6 , 



for all b e F. | 

We may further reduce the number of generators one by one down to 
three. The equations (3) below have been carefully chosen. They are 
satisfied independently of charF, and are as simple as the author was able 
to find. We leave the somewhat lengthy verification to the reader. Let 



e 3 
-e 3 1 



Then 



s(ei) = s(e 3 )s(e 2 ), 

s(e 2 ) = [u(ei)u(e 3 ) • u(e 2 )w(e 1 )][u(e 3 ) _1 • u(e 2 )s(e 3 )], 

w(e 3 ) = x _1 s(e 3 ), 

s(e 3 ) = [u(e 2 )w(ei) • x][xu(ei)] • [x 2 w(e 2 ) • u(ei)x 2 u(ei)]. 



Theorem 2.1. Assume that ¥ is a prime field. Then the simple Moufang 
loop M/Z(M) is generated by the three elements 

(1 (1,0,0) \ /l (0,1,0) \ / (0,0,1) \ 

v o i )' \o i 1,(0,0,-1) i )■ 



3. INTEGRAL CAYLEY NUMBERS OF UNIT NORM 

The smallest nonassociative simple Moufang loop M120 of 120 elements is 
constructed over the binary field. As Paige showed in [9], it is isomorphic 
to the integral Cayley numbers of unit norm modulo their center. The aim 
of this short section is to offer one explicit isomorphism, and to conclude 
that the loop of integral Cayley numbers of unit norm is generated mul- 
tiplicatively by three elements. The isomorphism will allow us to perform 
calculations inside integral Cayley numbers more efficiently than by the 
conventional rules. 

Unlike the case of complex numbers C and quaternions H, there are still 
many names for the eight-dimensional real algebra = 1x1 obtained 
from EI by the Cayley-Dickson process: Cayley numbers, algebra of octaves, 
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octonions. We prefer to use the name octonions. Recall that for (g, Q), 
(r, R) 6 H x H the multiplication in © is defined by 



where the bar indicates conjugation in H. An alternative way to describe 
the multiplication is to introduce a new unit e, regard © as H + He, and 
write (q + Qe) ■ (r + Re) = (qr - RQ) + (Rq + Qf)e. (For an excellent 
discussion concerning the notation in ©, sec [3].) 

When O is viewed as an eight-dimensional real vector space, we will use 
Dickson's notation for its basis, namely 1, i, j, k, e, ie, je, and fee. This is 
not the best choice when one wishes to describe the multiplicative relations 
between basis elements in a compact way (see [1], [3]), but it seems to be 
the best choice for what follows. 

The conjugate of the octonion a = q + Qe is defined as a = q — Qe. Its 
norm N(a) is then the non-negative real number aa. For any F = R, C, 
H, ©, a set of integral elements of F is defined as a maximal subset of F 
containing 1, closed under multiplication and subtraction, and such that 
both N(a) and a + a are integers for each element a of the set. Such a 
set is unique for F = M, C, and H. In the case of the octonions there are 
seven such sets, all isomorphic. For the rest of this paper, we select the 
one which Coxeter denotes by J, and calls integral Cayley numbers. 

By J' we mean the 240 elements of J with norm one. See [3], p. 29, for 
the list of all elements of J'. No three of the basis elements generate J'. 
Following common practice, let h = 1/2 • (i + j + k + e) 6 J'. Coxeter 
knew that i, j, and h generated J by multiplication and subtraction, but 
he did not notice that J' is generated by the above elements just under 
multiplication. From 2.1, we know that there must be three elements gen- 
crating J'/{1, —1}- Indeed, i, j, and h do the job. One of the possible 
isomorphisms ip : J' /{l, —1} — ► A4i2o is determined by 



which, however, is rather tedious to check by hand. The author acknowl- 
edges that he used his own set of GAP 4 libraries [6] to confirm the com- 
putation. Since i 2 = —1, we see that i, j, and h generate J'. 

In order to be able to carry out calculations in J', we would like to know 



(q, Q) ■ (r, R) = (qr - RQ, Rq + Qf), 





( (1,1,1) \ 
1(1,1,1) ) 
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Proof. Consider the multiplicative relations in [3], p. 567 (or p. 28). In 
particular, we have hi = — 1 — ih. Hence 

— (jh ■ hi) ■ kh = (jh + jh ■ ih) ■ kh = (jh + k — h — ih) ■ kh 

= jh ■ kh + k ■ kh — h ■ kh — ih ■ kh 

= (-i + h- kh) + (-h) -(k-h)- (j -h-kh) 

= —i—j — k + 2h, 

which equals e, since h = 1/2 • (i + j + k + e). | 
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